Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/76ldGyhjkTkawPUicXbDLp0Ineg.roa
File: 76ldGyhjkTkawPUicXbDLp0Ineg.roa (raw, json)
Hash identifier: +H5U7jE2Wiu/pD82V02VPvNTQ9LNH9p4cepGmb3MNnc=
Subject key identifier: EF:A9:5D:1B:28:63:91:39:1A:C0:F5:22:71:76:C3:2E:9D:08:9D:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DBDA912D9800B80BCEB99BE8C2035016A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/76ldGyhjkTkawPUicXbDLp0Ineg.roa
Signing time: Fri 24 Apr 2026 04:04:27 +0000
ROA not before: Fri 24 Apr 2026 04:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.142.0/24 maxlen: 24
5.83.150.0/24 maxlen: 24
5.175.137.0/24 maxlen: 24
5.175.174.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
5.231.116.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.129.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.180.0/24 maxlen: 24
94.249.197.0/24 maxlen: 24
94.249.202.0/24 maxlen: 24
178.18.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bd:a9:12:d9:80:0b:80:bc:eb:99:be:8c:20:35:01:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 24 04:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efa95d1b286391391ac0f5227176c32e9d089de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:d6:23:df:01:33:eb:5f:7f:3f:7a:22:e4:
f6:99:84:73:01:b6:62:3e:0c:f0:d8:d4:48:ce:e5:
eb:97:2e:be:d4:ac:8e:e4:72:cd:77:32:96:bf:0f:
68:08:cf:3f:47:d9:65:25:82:d3:37:c2:a4:a9:ea:
91:73:97:fc:7c:fa:c5:4e:0d:3b:ca:c9:b1:5b:ed:
e9:f9:1e:d3:ee:e5:2b:dc:82:ad:36:b4:d4:3b:bc:
60:e8:e8:1a:ce:1e:68:ff:fd:d5:4a:a6:65:ca:65:
4e:1c:4a:e3:06:4f:61:f4:1a:ec:18:f9:b3:7c:46:
e4:5b:8b:9e:94:e4:bb:45:b6:b3:65:7b:f7:99:be:
f2:ac:a0:13:b8:81:a8:6d:d5:0e:4d:16:13:2c:f4:
d5:9a:56:21:c2:dc:7d:c1:1e:a4:c9:6b:04:e9:37:
29:47:19:22:74:05:18:c6:45:7c:fa:fd:90:2f:5e:
6d:fa:15:43:9c:9c:a7:b1:81:fb:49:49:9d:b1:d6:
aa:10:6a:02:0b:5a:74:38:76:0d:6c:c9:50:e8:cb:
5e:e8:06:85:01:8b:c0:45:66:5d:00:9c:c6:6b:ac:
61:91:06:31:50:89:25:99:3c:7e:ba:f1:72:8f:87:
ed:89:4f:89:42:2e:bb:84:4c:09:8c:ea:f2:ff:ca:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:5D:1B:28:63:91:39:1A:C0:F5:22:71:76:C3:2E:9D:08:9D:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/76ldGyhjkTkawPUicXbDLp0Ineg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.142.0/24
5.83.150.0/24
5.175.137.0/24
5.175.174.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
5.231.116.0/24
77.90.39.0/24
85.118.162.0/24
87.239.129.0/24
89.106.88.0/24
89.144.18.0/24
94.103.167.0/24
94.249.150.0/24
94.249.153.0/24
94.249.180.0/24
94.249.197.0/24
94.249.202.0/24
178.18.146.0/24
Signature Algorithm: sha256WithRSAEncryption
59:95:0a:3c:59:86:fe:da:b5:aa:aa:4e:9f:12:ec:c2:7c:75:
e5:31:7c:7b:5c:ae:0b:10:a4:5c:86:5b:64:08:72:8c:7c:eb:
cf:96:77:76:e4:48:e7:4d:f4:2d:43:ba:cf:b9:9d:d3:4f:70:
72:bc:31:a9:63:31:a3:ef:0f:75:97:79:2a:92:1d:92:c2:33:
09:a6:b6:44:84:31:73:b1:b3:56:8b:e1:b6:66:b8:aa:7a:9f:
b5:77:58:1d:91:3a:d6:2f:6f:ae:0b:ec:ae:71:00:57:a9:7d:
64:7a:0f:32:83:bb:ce:f1:b6:df:1e:39:21:6a:4e:0e:d4:3a:
ac:60:96:70:08:7e:a3:77:ce:10:f4:91:3e:a0:b3:18:00:f3:
68:88:7e:33:ed:46:a5:f7:c2:c8:7e:e2:ad:4a:b5:37:ae:f6:
4a:b6:19:2b:f6:6c:c5:6b:f4:bd:aa:6c:f7:0e:e6:c3:c3:63:
d8:60:fa:d6:be:6e:01:9e:25:1b:ee:af:59:10:9f:a4:15:a8:
8f:f1:38:ba:a6:8f:b2:5d:c0:09:9d:be:d1:87:8a:d8:2f:1e:
34:62:3f:d3:99:a3:89:b9:76:dd:3b:f7:88:80:a1:8a:5d:86:
06:5a:62:fe:a1:64:23:b3:cc:2a:ba:e1:f7:80:7e:29:03:1a:
f1:43:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:57:21 2026 by rpki-client